CVE-2018-13348

The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the…

published July 6, 2018

CVSS
—
EPSS
2%
Percentile
81.5
In the wild
Unconfirmed
What it is

The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02104 · 81.5th percentile
Published
2018-07-06T00:00Z
EPSS history
Timeline
  • 06 JUL 00:00Z
    The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the…
    cvelistv5